Skip to content
OpenAdvisories
High WID-SEC-2026-3583 7 CVEs

MongoDB Treiber (Python Driver, PHP Driver, C Driver, Compass und Laravel): Mehrere Schwachstellen

Published Sep 24, 2026 · Updated Oct 4, 2026 · Revision 3 · de-DE

Vendor: Debian Vendor: SUSE Product: Linux Product: Linux Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in verschiedenen MongoDB Treibern (Python Driver, PHP Driver, C Driver, Compass und Laravel) ausnutzen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um beliebigen Programmcode auszuführen und um einen nicht näher spezifizierten Angriff durchzuführen.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 7

  • High 8.4
    CVE-2026-96749

    Heap out-of-bounds write via signed size overflow in BSON document encoding

    An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-b…

    MongoDB Python Driver datadog-agent-7.80-core-integrations datadog-agent-7.78-core-integrations Debian Ubuntu Azure Linux Wolfi PyPI
  • High 7.1
    CVE-2026-96744

    Unauthorized cache lock takeover via expression injection in lock owner values in MongoDB integration for Laravel

    Improper neutralization of special elements in data query logic in the cache lock implementation of the MongoDB integration for Laravel can cause a caller-supplied lock owner value to be evaluated as an aggregation expression rather than as a literal value. A…

    MongoDB Laravel MongoDB (PHP)
  • High 7.1
    CVE-2026-96750

    Shell script injection via server-supplied database name in Open MongoDB shell

    MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell when a user opens the shell from that database's view. A user with privileges to create databases on a server that a Compass user connects to…

    MongoDB Compass
  • Medium 6.5
    CVE-2026-96746

    Heap buffer overflow via mid-scan command list growth in client topology monitoring

    An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. Th…

    MongoDB C Driver mongo-c-driver pymongo Debian Ubuntu
  • Medium 6.5
    CVE-2026-96748

    Connection redirection via percent-encoded delimiter injection in connection string hosts

    PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that par…

    MongoDB Python Driver datadog-agent-7.80-core-integrations datadog-agent-7.78-core-integrations Debian Ubuntu Azure Linux Wolfi PyPI
  • Medium 5.6
    CVE-2026-96745

    PHP object injection via unsuppressible __pclass class inference in command monitoring events

    Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event objects. When an application registers a command monitoring …

    MongoDB PHP Driver php-mongodb pymongo Debian Ubuntu
  • Medium 5.0
    CVE-2026-96747

    Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

    The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata store…

    MongoDB Python Driver datadog-agent-7.79-core-integrations datadog-agent-7.80-core-integrations Debian Ubuntu Azure Linux Wolfi PyPI

Revision history

  1. #3

    Neue Updates von Debian aufgenommen

  2. #2

    Neue Updates von SUSE aufgenommen

  3. #1

    Initiale Fassung

References